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2.. Mobile application is 
commanded to move to sec-^ 
ond computer ^ 

/ 



1. Mobile application starts 
running on first computer 

20 




6. Mobile application contin- 
ues moving between comput- 
ers until its tasks are done. 




3. Mobile application re- 
sumes execution on second 
computer 



4. Mobile application is 
commanded to move to 
third computer 
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5. Mobile application re- 
sumes execution on third 
computer 
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1. Salesman fills out 
expense report form, *2_& 
then clicks "OK" S 



2. Form sends itself to. ' 
manager for approval / 



5. Salesman 
makes correc- 
tion, clicks 



/ 



3. Manager re- 
views form and 
finds a problem 
clicks "Return 




^4. Form sends 
itself back to 
salesman for 
update 



/ 



/ 6. Form re- 
turns itself to 
manager 



7. Manager ac- 
cepts form and 
clicks "OK" 



9. Form updates 
employee's 
records in compa- 
ny data base 



8. Form sends itself to 
Admin department 





10. Form sends itself to 
Finance department 



11. Form notifies accoun- 
tant, who cuts a check 
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Server inspects its pre- 
installed software for 
missing code. If it is 
found, it is returned to 
the current host. 



Server 

e. If originating host is not 
■trusted by server, server 
inspects its own software. 



52 



Server recieves 
request for 
missing code 



If originating 
host does not 
return the 
missing code, th< 
server inspectect 
its own software 




Current Host 



Figure 7 



r Hostl ^ 



1. Mobile application 
is created, and then 
later dispatched 




Server ' 

(fl'A^^^torage 
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2. Server saves copy/ 
of mobile applica- / 
Hon s code ^ 



3. Serv er forwards 
mobile application i 
next host 



6. Server compares 
new code against 
\ saved code 



"7. Server forward! 
mobile application 
to next host 



5. Server receives 
i mobile application 




4. Mobile application is re- 
ceived, and later dispatched 
to next host 



Host 2 
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Host 3 
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8. Mobile application ar- 
rives at next host 
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Host! 
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1. Mobile application 
is created, and then 
later dispatched 




Server 



2. Server saves 
copy of mobile 
application's 
code ^ 



t 
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Code which 
is known to 
be safe 



3. Server 



\ 



\ 



forwards mobile 
application to next 
host 




6. Server retrieves missing code 
from from its own pre-installed 
software. Because originating host 
is trusted, server may alternatively 
retrieve it from originating host 



5. If receiving host cannot 
locate any missing code, the 
missing code is requested 
from the server 



4. Mobile application 
is received 



Host 2 



Figure 9 
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Code which £Z 
is known to 
be safe 





Server 



3. Server 
ensures new 
code is same 
as previously 
saved code. 



7. Server retrieves missing 
code from its own pre- 
installed software. If 
originating host is trusted, 
server may retrieve missing 
code from originating host. 
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2. Server receives 
nobile application 



4. Server forwards 
mobile application to 
next host 




6. If any required code is 
missing, receiving host 
requests it from the 
server. 




H. Mobile application is 
^received from some other 
rhost, and later dispatched 
Ho next host. 



Host n 




5. Mobile application 
arrives at next host. 



Host n+1 



Figure 10 
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Code which 
is known to 
be safe 





Server 



3. Server 
saves mobile 
application's 
code 



7. Server retrieves missing 
code from its own pre- 
installed software. If 
originating host is trusted, 
server may retrieve missing 
code from originating host 



2. Server receives 
nobile application 
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4. Server forwards 
mobile application to 
next host 



6. If any required code is 
missing, receiving host 
requests it from the 
server. 
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pi. Mobile application is 
ji received from some other 
phost, and later dispatched 
rito next host. 



Host n 
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5. Mobile application 
arrives at next host. 



Host n+1 
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Figure 11 
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/ Hostl N 



1. Mobile application 
is created, and then 
later dispatched 
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) 

server 
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''Storage 
*•/ ] \ nev 



2. Server saves copy /T— ^6. Server compares 
of mobile applica- / J v new state against 
tion's state y \ saved state 

Wl* \ 

^ - * ^ "7. Server forward! 

- ~ ^ ^ x mobile applicatioi 

v N / to next host 



3. Server forwards 
mobile application t< 
next host 



5. Server receives 
, mobile application 



4. Mobile application is re- 
ceived, and later dispatched 
to next host. 



Host 2 




Host 3 



8. Mobile application ar- 
rives at next host 
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I. Mobile application 
is created, and then 
later dispatched 
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2. Server saves copy/ 
of mobile applica* / 
tion's itinerary y 



3. Server forwards 
mobile application 
next host 



server 



p- -"^Storage 




4. Mobile application is re- 
ceived 



^ Host 2 j 
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3. Server ensures new v 
itinerary matches previ- * 
ously saved itinerary V 



Server 

Storage 




1 ^ " "4. Server forward; 
\ ' mobile appUcatior 
to next host 



2. Server receives 
mobile application 
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Host n+1 
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5. Mobile application ar- 
rives at next host 
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l. Mobile application is dis- 
patched to next host. 
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torage 
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3. Server ensures past por- 
tion of new itinerary 
matches past portion of 
previously saved itinerary 



* ^ ■** "4. Server forward 
\ ' mobile applic&tior 

/ to next host 

/ 

2. Server receives 
mobile application 




1 . Mobile application is dis- 
patched to next host 



v Host n j 



MO 



Host n*1 



5. Mobile application ar- 
rives at next host 
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Host! 

1 . Mobile ap- 
plication is 
created, and 
then later dis- 
patched 




(Trusted) 



<5Z 



server s 

2. Server determines that 
mobile application is new, 
so further investigation is 
needed. Sever determines 
that the host is allowed to 
launch mobile applica- 
tions, so server forwards 
mobile application to next 
host. 




3. Mobile applica- 
tion is received 



Host 2 



MO 



' Hostl ^ 



1. Mobile appli- 
cation is created, 
and then later 
dispatched 




(Untrusted) 
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so 

J 



server N 

2. Server determines that mo- 
bile application is new, so fur- 
ther investigation is needed. 
Sever determines that the host 
is not allowed to launch mo- 
bile applications, so server 
does not forward the mobile 
application. 
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server 

2. Server determines 
that mobile application 
is not new, so no further 
investigation is needed. 
Server forwards the mo;' 
bile application to the ' 
next host. i 




r Host n+1 ^ 



3. Mobile applica- 
tion arrives at next 
host 



MO 



l. Mobile applica- 
tion is dispatched to 
next host. 
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